This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RTgz11hvD3jiC4BXaXbQm3rZYDE.cer
File:                     RTgz11hvD3jiC4BXaXbQm3rZYDE.cer (raw, json)
Hash identifier:          +XMa0HYzf3bimI5MNY+bNGRXII4jpLKfmDXXMZvg9P0=
Subject key identifier:   45:38:33:D7:58:6F:0F:78:E2:0B:80:57:69:76:D0:9B:7A:D9:60:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BF95C08053743F4152DD4BFB365BD7374
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 26 Jan 2026 08:11:56 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 49980
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:5c:08:05:37:43:f4:15:2d:d4:bf:b3:65:bd:73:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 26 08:11:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=453833d7586f0f78e20b80576976d09b7ad96031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9c:ec:3e:62:75:42:e6:5a:96:56:2f:05:95:
                    c8:e7:73:c7:16:ec:52:e5:29:6b:24:1e:ac:27:8b:
                    8b:6a:28:11:f0:9d:8e:ec:c8:0a:c4:fa:90:1a:c2:
                    b3:df:fb:cb:12:bc:fb:c3:b5:3c:81:58:27:ba:ea:
                    c2:1e:2e:cb:ad:16:e3:76:ac:69:81:56:4f:e6:1b:
                    24:e5:e0:6a:48:d7:d5:9b:f5:5a:d9:8d:46:64:65:
                    16:70:11:c8:0c:a0:79:2b:00:98:55:74:ae:a3:66:
                    80:11:b9:a7:34:c7:a7:f1:49:2f:c2:72:28:f3:da:
                    8d:45:b3:99:eb:bc:8f:ba:85:83:2a:72:26:a2:07:
                    3a:63:a8:85:f3:40:b4:9b:2d:d8:d8:40:be:3a:88:
                    bf:49:10:5d:92:71:45:04:95:a2:c8:87:5d:45:3d:
                    46:46:be:5f:33:03:f9:ba:b7:93:ce:c3:1d:cd:9b:
                    9f:1a:7a:2d:06:3a:a3:de:16:f9:8e:01:d8:a4:05:
                    a3:0b:fe:83:18:fe:f4:5d:82:35:1f:32:b0:d0:42:
                    fa:9b:30:7a:ef:30:43:5b:88:f5:c4:46:86:e4:cf:
                    cf:35:05:d3:ea:29:f3:16:e7:2d:19:74:8b:b9:10:
                    a6:12:a5:d5:a2:5f:d0:1b:43:74:42:61:37:62:3c:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:38:33:D7:58:6F:0F:78:E2:0B:80:57:69:76:D0:9B:7A:D9:60:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49980

    Signature Algorithm: sha256WithRSAEncryption
         ad:4c:bf:13:e3:e8:84:03:27:13:00:ea:e4:b6:92:b8:07:c6:
         c4:d7:a1:17:83:e3:19:6f:3d:7f:e4:01:f1:1f:7c:30:65:97:
         af:a7:dc:e3:73:75:91:69:7a:b0:35:ae:ee:5a:8c:56:92:c3:
         10:64:5e:a9:d7:6f:c6:fe:04:cc:69:5d:d4:ae:b0:ea:be:b2:
         6f:14:f8:66:83:ad:8c:34:77:73:9b:e5:c3:88:85:bc:b7:26:
         52:22:18:ed:74:b9:a0:52:9b:53:fa:e2:dc:da:53:33:d6:92:
         3f:6b:b3:4f:5a:34:c1:55:d2:3c:fc:cc:0d:de:f3:e1:9f:f9:
         25:c2:f3:02:56:a6:6c:00:81:dd:9c:30:7d:d6:b0:2d:7e:6e:
         0b:85:e8:4c:51:33:b7:96:24:8a:95:06:7b:8e:15:4d:f3:16:
         d9:06:8b:59:f3:10:de:91:e5:e4:3e:cb:1b:9c:e3:22:d3:3f:
         ee:a6:fd:2f:b6:0c:78:fd:0e:f2:90:4c:fd:a8:8f:d2:7c:86:
         69:d5:99:8e:69:e6:69:95:f4:6a:a9:f5:01:2a:05:0a:ab:08:
         06:b1:33:76:0c:66:d0:5c:ae:cb:6d:d0:eb:12:53:ab:62:6c:
         f3:01:f2:91:2d:ab:67:73:5b:70:93:91:2f:61:a8:a2:a1:ca:
         5d:0c:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----